diff --git a/dist/main.cjs b/dist/main.cjs
index 501be52..905c9fb 100644
--- a/dist/main.cjs
+++ b/dist/main.cjs
@@ -42400,7 +42400,7 @@ function getPermissionsFromInputs(env) {
   return Object.entries(env).reduce((permissions2, [key, value]) => {
     if (!key.startsWith("INPUT_PERMISSION-")) return permissions2;
     if (!value) return permissions2;
-    const permission = key.slice("INPUT_PERMISSION-".length).toLowerCase();
+    const permission = key.slice("INPUT_PERMISSION-".length).toLowerCase().replaceAll(/-/g, "_");
     if (permissions2 === void 0) {
       return { [permission]: value };
     }
diff --git a/lib/get-permissions-from-inputs.js b/lib/get-permissions-from-inputs.js
index 7777d94..7d01023 100644
--- a/lib/get-permissions-from-inputs.js
+++ b/lib/get-permissions-from-inputs.js
@@ -10,7 +10,8 @@ export function getPermissionsFromInputs(env) {
     if (!key.startsWith("INPUT_PERMISSION-")) return permissions;
     if (!value) return permissions;
 
-    const permission = key.slice("INPUT_PERMISSION-".length).toLowerCase();
+    const permission = key.slice("INPUT_PERMISSION-".length).toLowerCase()
+      .replaceAll(/-/g, "_");
 
     // Inherit app permissions if no permissions inputs are set
     if (permissions === undefined) {
diff --git a/package-lock.json b/package-lock.json
index d514b39..9c0901f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "create-github-app-token",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "create-github-app-token",
-      "version": "2.0.5",
+      "version": "2.0.6",
       "license": "MIT",
       "dependencies": {
         "@actions/core": "^1.11.1",
diff --git a/package.json b/package.json
index 80b5359..f294bd9 100644
--- a/package.json
+++ b/package.json
@@ -2,7 +2,7 @@
   "name": "create-github-app-token",
   "private": true,
   "type": "module",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "GitHub Action for creating a GitHub App Installation Access Token",
   "scripts": {
     "build": "esbuild main.js post.js --bundle --outdir=dist --out-extension:.js=.cjs --platform=node --target=node20.0.0 --packages=bundle",
diff --git a/tests/snapshots/index.js.md b/tests/snapshots/index.js.md
index 55b25ba..e419536 100644
--- a/tests/snapshots/index.js.md
+++ b/tests/snapshots/index.js.md
@@ -331,7 +331,7 @@ Generated by [AVA](https://avajs.dev).
     --- REQUESTS ---␊
     GET /repos/actions/create-github-app-token/installation␊
     POST /app/installations/123456/access_tokens␊
-    {"repositories":["create-github-app-token"],"permissions":{"issues":"write","pull-requests":"read"}}`
+    {"repositories":["create-github-app-token"],"permissions":{"issues":"write","pull_requests":"read"}}`
 
 ## post-revoke-token-fail-response.test.js
 
diff --git a/tests/snapshots/index.js.snap b/tests/snapshots/index.js.snap
index 0b63dab..773f4b1 100644
Binary files a/tests/snapshots/index.js.snap and b/tests/snapshots/index.js.snap differ